UBUNTU-CVE-2017-14636

Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexed::sortPal function in image.cpp. However, this also causes memory corruption because of an attempted write to the invalid d0xfffffffe array element...

UBUNTU-CVE-2017-14637

In sam2p 0.49.3, there is an invalid read of size 2 in the parsergb function in inxpm.cpp. However, this can also cause a write to an illegal address...

CVE-2017-14636

Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexed::sortPal function in image.cpp. However, this also causes memory corruption because of an attempted write to the invalid d0xfffffffe array element...

CVE-2017-14637

CVE-2017-14637 affects sam2p 0.49.3, where an invalid read of size 2 in parse_rgb() inside in_xpm.cpp can also cause a write to an illegal address. This is documented in multiple feeds (including OSV/DEBIAN notes for sam2p vulnerabilities) and is tied to the set of related CVEs in sam2p 0.49.3. E...

CVE-2017-14637

In sam2p 0.49.3, there is an invalid read of size 2 in the parsergb function in inxpm.cpp. However, this can also cause a write to an illegal address...

CVE-2017-14637

In sam2p 0.49.3, there is an invalid read of size 2 in the parsergb function in inxpm.cpp. However, this can also cause a write to an illegal address...

CVE-2017-14636: Integer Overflow or Wraparound

Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexed::sortPal function in image.cpp. However, this also causes memory corruption because of an attempted write to the invalid d0xfffffffe array element...

PT-2017-13597

Name of the Vulnerable Software and Affected Versions sam2p version 0.49.3 Description The issue is caused by an integer overflow, leading to a loop executing a large number of times and resulting in an invalid read. This also causes memory corruption due to an attempted write to an invalid array...

PT-2017-13598

Name of the Vulnerable Software and Affected Versions sam2p version 0.49.3 Description The issue is related to an invalid read of size 2 in the parse rgb function in in xpm.cpp, which can also lead to a write to an illegal address. Recommendations For sam2p version 0.49.3, at the moment, there is...

CVE-2017-14637: Improper Restriction of Operations within the Bounds of a Memory Buffer

In sam2p 0.49.3, there is an invalid read of size 2 in the parsergb function in inxpm.cpp. However, this can also cause a write to an illegal address...

Updated gstreamer0.10-plugins-good and gstreamer1.0-plugins-good packages fix security vulnerabilities

A crafted AAC audio file could have caused an invalid read and thus corruption or denial of service CVE-2016-10198. A crafted mp4 file could have caused an invalid read and thus corruption or denial of service CVE-2016-10199. A crafted AVI file could have caused an invalid read and thus corruptio...

Out-of-bounds

OpenCV Open Source Computer Vision Library through 3.3 has an out-of-bounds read error in the cv::RBaseStream::readBlock function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the 8-opencv-invalid-read-fread test case...

UBUNTU-CVE-2017-12598

OpenCV Open Source Computer Vision Library through 3.3 has an out-of-bounds read error in the cv::RBaseStream::readBlock function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the 8-opencv-invalid-read-fread test case...

libtasn1: heap overflow flaw in _asn1_extract_der_octet()

A heap-based buffer overflow flaw was found in the way the libtasn1 library decoded certain DER-encoded inputs. A specially crafted DER-encoded input could cause an application using libtasn1 to perform an invalid read, causing the application to crash...

AutoTrace Denial of Service Vulnerability (CNVD-2017-11830)

AutoTrace is a set of software for converting bitmap files Bitmap to vector files Vector. A denial of service vulnerability exists in the libautotrace.a file in AutoTrace version 0.31.1. A remote attacker can exploit this vulnerability to cause a denial of service invalid read and SEGV...

LAME lame_init_params function denial of service vulnerability

LAME is LAME team developed a set of open source MP3 audio compression software . A security vulnerability exists in the 'lameinitparams' function in the lame.c file of the libmp3lame.a file in LAME version 3.99.5. A remote attacker can exploit this vulnerability to cause a denial of service...

CVE-2015-9099

The lameinitparams function in lame.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of service invalid read and application crash via a crafted audio file with a negative sample rate...

PT-2017-7546 · Lame +2 · Lame +2

Name of the Vulnerable Software and Affected Versions: LAME version 3.99.5 Description: The issue allows remote attackers to cause a denial of service, resulting in an invalid read and application crash, by exploiting a crafted audio file with a negative sample rate. This is due to a problem in t...

VLC Media Player Multiple Denial-of-Service Vulnerabilities - Windows

VLC media player is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-9301

plugins\audiofilter\libmpgatofixed32plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to cause a denial of service invalid read and application crash or possibly have unspecified other impact via a crafted file...